/** * @inheritdoc */ public function behaviors() { return ['access' => ['class' => AccessControl::className(), 'rules' => [['actions' => ['index', 'confirm', 'resend'], 'allow' => true, 'roles' => ['?', '@']], ['actions' => ['account', 'profile', 'resend-change', 'cancel', 'logout'], 'allow' => true, 'roles' => ['@']], ['actions' => ['forgot', 'reset'], 'allow' => true, 'roles' => ['?']], ['actions' => ['register', 'login'], 'allow' => true, 'roles' => ['?'], 'matchCallback' => function ($rule, $action) { if (User::hasBannedIP()) { throw new ForbiddenHttpException('Ваш IP адрес забанен.'); } return true; }]]], 'verbs' => ['class' => VerbFilter::className(), 'actions' => []]]; }